IRM-AdvisorsCyber & AI governance · Geneva
CISO on demand

CISO on demand for regulated organisations

You need someone accountable for information security, but a full-time CISO is more than your size justifies. Daniel Anastasi works inside your organisation as your CISO for a fixed number of days each month.

  • FINMA Circ. 2023/1
  • DORA
  • ISO/IEC 27001
  • revFADP
Effort
Typically 2 to 4 days per month
Pricing
Fixed price, quoted after a 30-minute scoping call.

Who it is for

  • Banks, asset managers and external asset managers supervised by FINMA
  • Crypto and digital-asset firms preparing for licensing or enterprise clients
  • Organisations between two CISOs that need interim cover
  • EU-connected entities that must meet DORA requirements

What you receive

  • A named CISO accountable for your security programme
  • Security strategy and 12-month roadmap tied to business risk
  • Policies, risk register and control framework kept current
  • Monthly management report and quarterly board briefing
  • One contact for auditors, audit firms and clients’ due-diligence questionnaires
  • Oversight of IT providers, managed service providers and SOC partners

How it works

  1. OnboardingTwo weeks to review your risks, controls, providers and open audit findings.
  2. RoadmapA prioritised plan agreed with management, with owners and dates.
  3. RunRegular days on site or remote: governance meetings, reporting and supplier oversight.
  4. ReviewQuarterly review of progress and risk posture with the board or executive committee.

Relevant credentials

CISM (ISACA)
CISMCertified Information Security ManagerISACA
GIAC GSTRT (GIAC)
GIAC GSTRTStrategic Planning, Policy, and LeadershipGIAC
CISA (ISACA)
CISACertified Information Systems AuditorISACA

Selected engagements

  • Asset managersCISO as a service for FINMA-supervised asset managers.
  • Large outsourcing accountsInformation Security and Compliance Officer across 400 sites worldwide.
  • Large Swiss bankDefined and improved the bank’s cybersecurity controls.

Frequently asked questions

What is a fractional CISO?

An experienced security leader who works part-time for several organisations. You get senior expertise and clear accountability without the cost of a full-time hire.

How many days per month do we need?

Most clients start with 2 to 4 days per month. The scope is reviewed each quarter and can increase around audits, incidents or projects.

Can the CISO represent us to FINMA or our audit firm?

Yes. Daniel prepares and presents security evidence, answers auditors’ questions and follows up findings. Regulatory accountability stays with your management body.

How much does a fractional CISO cost?

A fixed monthly fee, agreed in advance and quoted after a 30-minute scoping call.

Discuss your situation in a 30-minute call. No preparation needed.

Book a call